Is there a way to achieve the same without use of LDAP browser? e.g. can this be done via command line tool or SM Console?

Answer:

Not sure if this can be done via SM console. Somethign you might want to find out from CA SSO side. From CA Directory side, this can absoutely be done via command line tool 'dxmodify' (comes bundled with CA Directory product) OR you can even use open source ldapmodify tool.